Methods and apparatus for providing an insertion and integrity protection system associated with a wireless communication platform

• US 20070076885A1
• Filed: 09/30/2005
• Published: 04/05/2007
• Est. Priority Date: 09/30/2005
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Sood, Kapil, Schluessler, Travis, Lord, Christopher
• Granted Patent: US 7,921,463 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

Embodiments of methods and apparatus for providing an insertion and integrity protection system associated with a wireless communication platform are generally described herein. Other embodiments may be described and claimed.

Claims

1. A method comprising:

comparing a first data integrity value and a second data integrity value of a protocol data unit (PDU) at a network interface device of a wireless communication platform, the first data integrity value being associated with a device driver operatively coupled to the network interface device and the second data integrity value being associated with the network interface device; and

identifying a condition indicative of integrity of the PDU based on comparison of the first and second data integrity values.

2. A method as defined in claim 1 further comprising generating the first data integrity value at the device driver based on one or more encryption keys and one or more sequence values, and providing the one or more encryption keys to the network interface device.

3. A method as defined in claim 1 further comprising storing the first data integrity value in a message integrity check field of a data frame and storing the data frame in a host storage device accessible by the network interface device.

4. A method as defined in claim 1 further comprising synchronizing one or more sequence counters associated with the device driver and the network interface device.

5. A method as defined in claim 1 further comprising retrieving a data frame from a host storage device accessible by the network interface device, the data frame including the first data integrity value in a message integrity check field.

6. A method as defined in claim 1 further comprising generating the second data integrity value at the network interface device based on one or more encryption keys generated by the device driver and one or more sequence values synchronized by the device driver.

7. A method as defined in claim 1 further comprising encrypting a data frame at the network interface device and transmitting the data frame via a wireless link in response to identifying a legal condition or a valid condition associated with the data frame based on a condition of a sequence value associated with the data frame and comparison of the first and second data integrity values.

8. A method as defined in claim 1 further comprising discarding a data frame in response to identifying an illegal condition or an invalid condition associated with the data frame based on at least one of a condition of a sequence value associated with the data frame or comparison of the first and second data integrity values.

9. A method as defined in claim 1 further comprising performing a remedial action based on the condition, wherein the remedial action comprises at least one of generating one of an event report or an event log, transmitting a notification to a management console, terminating network traffic associated with a network, or controlling rate of the network traffic.

10. An article of manufacture including content, which when accessed, causes a machine to:

compare a first data integrity value and a second data integrity value of a protocol data unit (PDU) at a network interface device of a wireless communication platform, the first data integrity value being associated with a device driver operatively coupled to the network interface device and the second data integrity value being associated with the network interface device; and

identify a condition indicative of integrity of the data traffic based on the first and second data integrity values.

11. An article of manufacture as defined in claim 10, wherein the content, when accessed, causes the machine to generate the first data integrity value at the device driver based on one or more encryption keys and one or more sequence values, and provide the one or more encryption keys to the network interface device.

12. An article of manufacture as defined in claim 10, wherein the content, when accessed, causes the machine to generate the second data integrity value at the network interface device based on one or more encryption keys generated by the device driver and one or more sequence values synchronized by the device driver.

13. An article of manufacture as defined in claim 10, wherein the content, when accessed, causes the machine to retrieve a data frame from a host storage device accessible by the network interface device, and wherein the data frame includes the first data integrity value in a message integrity check field.

14. An article of manufacture as defined in claim 10, wherein the content, when accessed, causes the machine to encrypt a data frame and transmit the data frame via a wireless link in response to identifying one of a legal condition or a valid condition of integrity of the data frame based on a condition of a sequence value associated with the data frame and comparison of the first and second data integrity values.

15. An article of manufacture as defined in claim 10, wherein the content, when accessed, causes the machine to discard a data frame in response to identifying one of an illegal condition or an invalid condition of integrity of the data frame based on at least one of a condition of a sequence value associated with the data frame or comparison of the first and second data integrity values.

16. An article of manufacture as defined in claim 10, wherein the content, when accessed, causes the machine to perform a remedial action based on the condition, and wherein the remedial action comprises at least one of generating one of an event report or an event log, transmitting a notification to a management console, terminating network traffic associated with a network, or controlling rate of the network traffic.

17. An apparatus comprising:

a device driver to generate a first data integrity value of a protocol data unit (PDU); and

a network interface device coupled to the device driver to generate a second data integrity value of the PDU, to compare the first and second data integrity values, and to identify a condition indicative of integrity of the PDU based on comparison of the first and second data integrity values.

18. An apparatus as defined in claim 17, wherein the device driver is configured to generate the first data integrity value based on one or more encryption keys and one or more sequence values, and to provide the one or more encryption keys to the network interface device.

19. An apparatus as defined in claim 17, wherein the device driver is configured to store the first data integrity value in a message integrity check field of a data frame and to store the data frame in a host storage device accessible by the network interface device.

20. An apparatus as defined in claim 17, wherein the device driver is configured to synchronize one or more sequence counters associated with the device driver and the network interface device.

21. An apparatus as defined in claim 17, wherein the network interface device is configured to generate the second data integrity value based on one or more encryption keys generated by the device driver and one or more sequence values synchronized by the device driver.

22. An apparatus as defined in claim 17, wherein the network interface device is configured to encrypt a data frame and transmit the data frame via a wireless link in response to identifying a legal condition or a valid condition associated with the data frame based on a condition of a sequence value associated with the data frame and comparison of the first and second data integrity values.

23. An apparatus as defined in claim 17, wherein the network interface device is configured to discard a data frame in response to identifying one of an illegal condition or an invalid condition associated with the data frame based on at least one of a condition of a sequence value associated with the data frame or comparison of the first and second data integrity values.

24. An apparatus as defined in claim 17, wherein the network interface device is configured to perform a remedial action based on the condition, and wherein the remedial action comprises at least one of generating one of an event report or an event log, transmitting a notification to a management console, terminating network traffic to a network, or controlling rate of the network traffic.

25. A system comprising:

a processor to generate a first data integrity value of a protocol data unit (PDU);

a network interface card operatively coupled to the processor to generate a second data integrity value of the PDU, to compare the first and second data integrity values, and to identify a condition indicative of integrity of the PDU based on the first and second data integrity values; and

an omni-directional antenna operatively coupled to the network interface card.

26. A system as defined in claim 25, wherein the network interface card is configured to retrieve a data frame from a host memory, and wherein the data frame includes the first data integrity value in a message integrity check field.

27. A system as defined in claim 25, wherein the network interface card is configured to generate the second data integrity value based on one or more encryption keys generated by the processor and one or more sequence values synchronized by the processor.

28. A system as defined in claim 25, wherein the network interface card is configured to encrypt a data frame and transmit the data frame via a wireless link in response to identifying a legal condition or a valid condition associated with the data frame based on a condition of a sequence value associated with the data frame and comparison of the first and second data integrity values.

29. A system as defined in claim 25, wherein the network interface card is configured to discard a data frame in response to identifying one of an illegal condition or an invalid condition associated with the data frame based on at least one of a condition of a sequence value associated with the data frame or comparison of the first and second data integrity values.

30. A system as defined in claim 25, wherein the network interface card is configured to perform a remedial action based on the condition, and wherein the remedial action comprises at least one of generating one of an event report or an event log, transmitting a notification to a management console, terminating network traffic to a network, or controlling rate of the network traffic.